Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier: /Pmt55+kaMU3isl6ObSGnZichHR6FN0Q/KU1NH7XjdI=
Subject key identifier: 4B:13:C6:C9:BE:2E:16:90:4E:8C:8C:CF:31:89:4E:31:17:D9:0D:FD
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 019840CFBB0107FCB4B0A6B8F218A3B9CB25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number: 153A
Signing time: Fri 25 Jul 2025 09:00:12 +0000
Manifest this update: Fri 25 Jul 2025 09:00:12 +0000
Manifest next update: Sat 26 Jul 2025 09:00:12 +0000
Files and hashes: 1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: L5DMoyZMttZXdZNKWbNSdYD1LuhhA05BWedbEokLZ6c=)
2: a66Wq_cz1-opkUh3xxWdvnCXHIE.roa (hash: RBd7B7hKzSBV9gC+hmCCrVD1uw4jr8IoDZkTqDG8H1A=)
3: am2sy58F1CS8R1serePPA8VUSM8.roa (hash: mn9+spB9id4ITF5EVifryU58phMpNbZ14Htzb13CxjQ=)
4: mBtneH0apKymD1yidiviYwQz7bc.roa (hash: +okWaOCxw+vLPC+W7D2xJzjJ34ydGJtCuhpbcrxYg+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:cf:bb:01:07:fc:b4:b0:a6:b8:f2:18:a3:b9:cb:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Jul 25 09:00:12 2025 GMT
Not After : Jul 26 09:00:12 2025 GMT
Subject: CN=4b13c6c9be2e16904e8c8ccf31894e3117d90dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:95:0d:06:48:23:78:25:58:a4:f9:6b:f2:f2:
e5:c0:5b:3e:fc:9d:bd:4d:e3:5a:e4:15:5b:ce:c2:
ab:39:7a:07:c5:84:e6:29:6e:ed:ac:f2:83:3f:a3:
0e:6e:32:6e:d6:b7:f4:c3:05:5e:23:2d:eb:22:46:
ca:5b:c7:03:f5:45:73:c9:7f:06:6c:16:1a:c4:77:
41:e5:26:00:db:ab:2a:a0:f5:d0:89:3c:a8:fa:7f:
b5:b5:41:08:04:bf:2b:0c:7f:2c:2e:14:a7:9f:da:
7b:f1:ec:a7:04:66:54:88:eb:27:c9:78:fa:e7:a3:
50:c5:9b:b9:0e:a9:f8:65:c2:a4:3b:76:54:58:26:
a4:04:b8:9d:3b:5f:a4:a7:e6:5d:1d:11:d3:43:9e:
af:85:25:62:24:ae:49:77:84:77:2f:11:55:cf:5a:
e0:38:52:af:ab:07:9b:cc:89:50:a3:90:49:39:9b:
ae:9e:34:39:6e:1c:ab:3c:bc:01:a5:62:2e:42:5e:
e7:53:fe:d4:15:2d:f6:78:39:73:66:0c:a5:8a:3a:
47:2f:dd:89:a3:76:84:97:5f:0e:f4:61:d9:9d:f5:
50:4f:24:e9:fe:5e:58:a5:f7:4d:77:a2:57:a5:d4:
d7:64:3c:13:ea:87:1b:77:39:4a:db:30:d3:7e:3a:
59:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:13:C6:C9:BE:2E:16:90:4E:8C:8C:CF:31:89:4E:31:17:D9:0D:FD
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:bd:aa:f2:60:fa:5d:48:21:c5:30:ee:bb:90:5e:54:dd:e9:
c7:bd:49:cd:bf:6a:be:fd:43:c0:e0:fc:4e:bb:e2:91:8e:75:
a6:17:0c:87:8a:f0:99:29:f2:89:e0:85:c0:7e:5b:5a:b1:ee:
af:0d:f3:2c:fc:67:fe:8f:c0:28:96:5c:ac:f5:52:53:d9:b7:
65:00:e0:8c:e0:81:0a:2d:fd:ce:96:3f:f2:77:7a:19:8f:90:
d1:95:37:66:22:1e:ce:c5:e5:77:bd:89:c9:83:4a:3c:7d:26:
23:5b:bb:27:79:61:0c:4f:8c:9f:c7:7c:10:29:4d:bc:97:c9:
b4:ec:ad:64:2a:1f:7a:20:0c:41:c4:2f:1f:77:84:07:2a:4e:
d4:bf:84:72:19:ae:5c:e0:3b:cd:7b:52:e5:82:26:07:7a:81:
1a:87:eb:2f:bc:be:77:32:3c:9b:26:be:88:a3:b7:33:6a:81:
c3:7d:26:12:97:d3:87:9c:2e:95:cb:6c:46:aa:34:1d:eb:a4:
ef:e4:76:78:c5:7c:00:2e:30:a9:f1:ce:c1:11:d7:54:22:23:
ad:0a:ed:7b:21:97:5c:dd:3b:38:c9:c1:25:4b:95:95:22:90:
53:dd:85:88:38:df:eb:86:bf:7e:a2:44:de:0b:c5:c0:2c:5e:
de:c2:76:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhAz7sBB/y0sKa48hijucslMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYjlhM2NlMGY1OTM5MTA4MTljMzI3MWUxZThkMGJkMTM3
MWE2YmUwHhcNMjUwNzI1MDkwMDEyWhcNMjUwNzI2MDkwMDEyWjAzMTEwLwYDVQQD
Eyg0YjEzYzZjOWJlMmUxNjkwNGU4YzhjY2YzMTg5NGUzMTE3ZDkwZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupUNBkgjeCVYpPlr8vLlwFs+/J29
TeNa5BVbzsKrOXoHxYTmKW7trPKDP6MObjJu1rf0wwVeIy3rIkbKW8cD9UVzyX8G
bBYaxHdB5SYA26sqoPXQiTyo+n+1tUEIBL8rDH8sLhSnn9p78eynBGZUiOsnyXj6
56NQxZu5Dqn4ZcKkO3ZUWCakBLidO1+kp+ZdHRHTQ56vhSViJK5Jd4R3LxFVz1rg
OFKvqwebzIlQo5BJOZuunjQ5bhyrPLwBpWIuQl7nU/7UFS32eDlzZgylijpHL92J
o3aEl18O9GHZnfVQTyTp/l5YpfdNd6JXpdTXZDwT6ocbdzlK2zDTfjpZkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsTxsm+LhaQToyMzzGJTjEX2Q39MB8GA1UdIwQY
MBaAFOG5o84PWTkQgZwyceHo0L0Tcaa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTIt
YmE0YzU2ZDhjMGNlLzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTItYmE0YzU2ZDhjMGNl
LzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAub2q8mD6
XUghxTDuu5BeVN3px71Jzb9qvv1DwOD8TrvikY51phcMh4rwmSnyieCFwH5bWrHu
rw3zLPxn/o/AKJZcrPVSU9m3ZQDgjOCBCi39zpY/8nd6GY+Q0ZU3ZiIezsXld72J
yYNKPH0mI1u7J3lhDE+Mn8d8EClNvJfJtOytZCofeiAMQcQvH3eEBypO1L+Echmu
XOA7zXtS5YImB3qBGofrL7y+dzI8mya+iKO3M2qBw30mEpfTh5wulctsRqo0Heuk
7+R2eMV8AC4wqfHOwRHXVCIjrQrteyGXXN07OMnBJUuVlSKQU92FiDjf64a/fqJE
3gvFwCxe3sJ2AA==
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:45:20 2025 by rpki-client